This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/r57Hp-sjdnStVWxCsycmoumb7yM.roa File: r57Hp-sjdnStVWxCsycmoumb7yM.roa (raw, json) Hash identifier: NDXymAugnG/6nvYU9yP//Ix+vW4I3MtpbHjkvKHOeZU= Subject key identifier: AF:9E:C7:A7:EB:23:76:74:AD:55:6C:42:B3:27:26:A2:E9:9B:EF:23 Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B1F66283CD19D98C91E03DED70925 Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/r57Hp-sjdnStVWxCsycmoumb7yM.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44380 IP address blocks: 195.93.206.0/23 maxlen: 23 195.191.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1f:66:28:3c:d1:9d:98:c9:1e:03:de:d7:09:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af9ec7a7eb237674ad556c42b32726a2e99bef23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:f8:eb:28:08:5c:9f:fe:d5:33:81:2a:e7: c2:28:06:33:4d:10:3e:2a:5c:3b:a6:f0:8b:ed:72: 89:33:56:5b:f6:0a:04:51:ae:bf:48:e5:79:d8:1d: 8d:79:87:54:fb:30:67:77:d6:10:db:2c:30:40:71: 45:d4:40:9d:7d:1c:4c:b3:5e:66:d2:c8:22:5e:16: 00:07:7e:2f:f4:56:09:b4:7b:3e:38:85:28:3f:9d: 4c:79:78:85:82:57:a3:3b:5d:fc:33:69:ed:23:2d: d2:c1:41:a4:39:b8:cb:af:c8:4d:6a:28:f6:47:a1: 34:9d:5a:be:3b:26:4c:e8:b8:b8:af:14:51:0b:ff: 7d:3d:c9:3e:19:51:96:3d:3e:22:34:a0:12:e0:e1: bb:f9:9f:e0:8b:4f:48:dc:77:65:56:81:dd:28:f2: 5a:3e:da:b2:73:f5:d9:43:90:a9:38:fe:53:e3:7f: 8e:9e:3a:77:0e:d9:ba:42:15:54:97:5d:8a:41:85: d0:34:48:d3:51:ac:30:5e:ee:8d:fd:9b:4b:ac:94: 78:16:38:29:df:88:d7:36:7b:1a:ff:0c:94:56:16: bd:e3:46:67:43:f3:af:7e:01:77:e3:7e:eb:30:f8: f7:e7:39:50:c0:f1:49:4a:a6:a5:34:2f:35:cc:15: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9E:C7:A7:EB:23:76:74:AD:55:6C:42:B3:27:26:A2:E9:9B:EF:23 X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/r57Hp-sjdnStVWxCsycmoumb7yM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.93.206.0/23 195.191.146.0/23 Signature Algorithm: sha256WithRSAEncryption af:ba:86:20:e2:5c:8b:35:98:8a:2f:73:77:7d:11:4a:d9:89: 78:f7:5e:e3:ac:32:32:41:e8:83:b0:42:83:63:01:19:b0:cd: 10:3e:3c:90:b2:38:6c:d3:29:84:bd:a8:6b:6b:3c:4b:2c:94: 70:96:92:3e:9f:0c:43:0c:1b:54:87:67:98:ca:f1:98:8b:d8: 7b:73:fe:95:03:b1:33:35:97:17:b6:9a:b2:7b:2c:fd:a9:55: 5d:31:5b:27:22:18:2d:e7:6f:52:a1:3a:75:94:80:1c:07:29: 78:3a:d9:d9:aa:a3:be:4d:52:e9:74:af:1c:f4:f7:e4:f6:d1: 81:1d:c3:45:98:34:a8:5e:03:5f:09:9f:09:1a:79:f3:95:62: b4:ff:9a:c3:d2:42:40:85:ac:9f:6b:72:cd:ce:7e:12:8b:c2: 7f:52:23:29:07:72:44:b8:27:e9:83:4b:ef:32:cb:7e:6e:f1: e8:11:bf:1a:fd:74:29:22:62:d7:ac:24:8a:1b:c1:1c:f3:d7: 57:fa:68:15:d5:c2:78:23:ee:0d:44:c0:df:c5:d2:66:82:36: 8f:06:49:55:e6:b2:01:5d:09:be:ce:44:39:de:eb:c6:e6:84: e3:d1:01:29:37:c6:d6:a2:05:d5:8c:4a:46:2f:08:23:a5:21: b5:53:10:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wx9mKDzRnZjJHgPe1wklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjllYzdhN2ViMjM3Njc0YWQ1NTZjNDJiMzI3MjZhMmU5OWJlZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspz46ygIXJ/+1TOBKufCKAYzTRA+ Klw7pvCL7XKJM1Zb9goEUa6/SOV52B2NeYdU+zBnd9YQ2ywwQHFF1ECdfRxMs15m 0sgiXhYAB34v9FYJtHs+OIUoP51MeXiFglejO138M2ntIy3SwUGkObjLr8hNaij2 R6E0nVq+OyZM6Li4rxRRC/99Pck+GVGWPT4iNKAS4OG7+Z/gi09I3HdlVoHdKPJa Ptqyc/XZQ5CpOP5T43+Onjp3Dtm6QhVUl12KQYXQNEjTUawwXu6N/ZtLrJR4Fjgp 34jXNnsa/wyUVha940ZnQ/OvfgF3437rMPj35zlQwPFJSqalNC81zBWHyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK+ex6frI3Z0rVVsQrMnJqLpm+8jMB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvcjU3SHAtc2pkblN0Vld4Q3N5Y21vdW1iN3lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw13OAwQB w7+SMA0GCSqGSIb3DQEBCwUAA4IBAQCvuoYg4lyLNZiKL3N3fRFK2Yl4917jrDIy QeiDsEKDYwEZsM0QPjyQsjhs0ymEvahrazxLLJRwlpI+nwxDDBtUh2eYyvGYi9h7 c/6VA7EzNZcXtpqyeyz9qVVdMVsnIhgt529SoTp1lIAcByl4OtnZqqO+TVLpdK8c 9Pfk9tGBHcNFmDSoXgNfCZ8JGnnzlWK0/5rD0kJAhayfa3LNzn4Si8J/UiMpB3JE uCfpg0vvMst+bvHoEb8a/XQpImLXrCSKG8Ec89dX+mgV1cJ4I+4NRMDfxdJmgjaP BklV5rIBXQm+zkQ53uvG5oTj0QEpN8bWogXVjEpGLwgjpSG1UxCR -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:40 2026 by rpki-client